US10931446B2 - Method and system for protecting sharing information - Google Patents
Method and system for protecting sharing information Download PDFInfo
- Publication number
- US10931446B2 US10931446B2 US16/074,418 US201716074418A US10931446B2 US 10931446 B2 US10931446 B2 US 10931446B2 US 201716074418 A US201716074418 A US 201716074418A US 10931446 B2 US10931446 B2 US 10931446B2
- Authority
- US
- United States
- Prior art keywords
- information
- shared
- shared photograph
- photograph information
- pieces
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active, expires
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/085—Secret sharing or secret splitting, e.g. threshold schemes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/14—Multichannel or multilink protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0894—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
- H04L9/3278—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response using physically unclonable functions [PUF]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2149—Restricted operating environment
Definitions
- the following description relates to a technology for safely protecting shared information, such as a photo, an image or a document.
- Korean Patent Application Publication No. 10-2005-0000238 Jan. 3, 2005 entitled “Photograph device for mobile communication device” discloses a technology in which a unique number (e.g., ESN, MIN or IMSI) assigned to a device is automatically watermarked on an image when the image is captured.
- a unique number e.g., ESN, MIN or IMSI
- Embodiments of the present invention provide a method and system capable of preventing the leakage of unwanted information by preventing information including contents to be protected from being used without permission from a counterpart who shares the information including contents to be protected.
- an information protection method implemented by a computer, including setting shared information to be protected and a sharing counterpart with whom the shared information is to be shared, segmenting the shared information into a plurality of pieces and storing the segmented pieces in the terminals of respective users included in the sharing counterpart, and receiving the segmented pieces from the terminals of the users and restoring the shared information if all of the users included in the sharing counterpart accept the use of the shared information.
- storing the segmented pieces may include segmenting the shared information into pieces of a number corresponding to the number of persons of the sharing counterpart.
- storing the segmented pieces may include ciphering the segmented pieces and transmitting the ciphered segmented pieces to the terminals of the respective users.
- storing the segmented pieces may include ciphering the segmented pieces using different encryption keys and transmitting the ciphered segmented pieces to the terminals of the respective user.
- storing the segmented pieces may include transmitting an encryption key used for the ciphering of the segmented pieces to the terminals of the respective users along with the segmented pieces.
- an encryption key used for the ciphering of the segmented pieces may be stored in a repository different from the repository of the segmented pieces.
- restoring the shared information may include requesting use acceptance for the shared information from the terminal of another user included in the sharing counterpart when a use request for the shared information is received from the terminal of any one user included in the sharing counterpart, receiving all of the segmented pieces forming the shared information from the terminals of all users included in the sharing counterpart when all the users accept the use of the shared information and restoring the shared information, and transmitting the restored shared information to the terminal of the user who has requested the use of the shared information.
- restoring the shared information may include receiving an encryption key from the terminal of each user along with the segmented piece, deciphering the segmented piece, and restoring the shared information.
- restoring the shared information may include processing the restored shared information using a copy prevention scheme so that the duplication of the restored shared information is impossible.
- an information protection system implemented as a computer, including an information segmentation unit configured to set shared information to be protected and a sharing counterpart with whom the shared information is to be shared, segment the shared information into a plurality of pieces, and store the segmented pieces in the terminals of respective users included in the sharing counterpart and an information restoration unit configured to receive the segmented pieces from the terminals of the users and restore the shared information if all of the users included in the sharing counterpart accept the use of the shared information.
- FIG. 1 is a diagram for illustrating an example of an information protection environment in an embodiment of the present invention.
- FIG. 2 is a block diagram for illustrating the internal configuration of the information protection system in an embodiment of the present invention.
- FIG. 3 is a flowchart showing an information protection method in an embodiment of the present invention.
- FIG. 4 is a diagram for illustrating an example of a photographed information segmentation process according to an embodiment of the present invention.
- FIG. 5 is a diagram for illustrating an example of a photographed information restoration process according to an embodiment of the present invention.
- FIG. 6 is a block diagram for illustrating an example of the internal configuration of a computer system according to an embodiment of the present invention.
- Embodiments of the present invention relate to a technology for safely protecting information, such as documents, photos, moving images and voice shared between users.
- shared information means all of pieces of information capable of being shared between two or more users.
- Representative examples of the shared information may include various documents or voice in addition to photos and moving images, that is, photographed information.
- FIG. 1 is a diagram for illustrating an example of an information protection environment in an embodiment of the present invention.
- FIG. 1 shows user terminals 101 and 102 and an information protection system 100 .
- an arrow means that data may be transmitted/received between the elements over a wired/wireless network 10 .
- the user terminal 101 , 102 may execute one or more processes configured to perform one or more of characteristics described in this specification.
- the user terminal 101 , 102 may mean all of terminal devices capable of accessing a web/mobile site related to the information protection system 100 or installing and executing a service-dedicated app related to the information protection system 100 .
- the user terminal 101 , 102 may perform general service operations, such as a service screen configuration, data input, data transmission/reception, and data storage, under the control of the web/mobile site or dedicated app.
- An example of the user terminal 101 , 102 may include a smartphone, a tablet, a wearable computer, a personal computer (PC), a notebook computer and laptop computer, but is not limited thereto.
- the user terminal 101 , 102 may be connected to the network 10 (e.g., the Internet or a local area network) directly or indirectly.
- a PC and a notebook computer may be directly connected to the network 10 through a wired network connection.
- a laptop computer may be wirelessly connected to the network 10 through a wireless communication channel established between a laptop computer and a wireless access point (WAP).
- WAP wireless access point
- a smartphone may be wirelessly connected to the network 10 through a wireless communication channel established between a smartphone and a cellular network/bridge.
- the network 10 may communicate with one or more secondary networks (not shown). Examples of the secondary networks may include a local area network, a wide area network and an intranet, but are not limited thereto.
- the user terminal 101 , 102 may interface with the information protection system 100 over the network 10 .
- the information protection system 100 may execute one or more processes configured to perform one or more of the characteristics described in this specification.
- the information protection system 100 may be implemented on a service platform that provides information protection service including the characteristics described in this specification, and may provide an environment in which shared information between the user terminals 101 and 102 , that is, clients using the information protection service, is protected to the user terminals 101 and 102 .
- the information protection system 100 corresponds to a server computer.
- An example of the server computer may include a server computing device, a PC, a server computer, a series of server computers, a mini computer and/or a mainframe computer, but is not limited thereto.
- the server computer may be a distributed system. Furthermore, the operations of the server computer may be executed on one or more processors simultaneously and/or sequentially.
- the information protection system 100 may be implemented in an app form in which at least some element are installed on the user terminal 101 , 102 or may be implemented in a form included in a platform that provides services in a client-server environment.
- FIG. 2 is a block diagram for illustrating the internal configuration of the information protection system in an embodiment of the present invention.
- FIG. 3 is a flowchart showing an information protection method in an embodiment of the present invention.
- the information protection system 100 may include a processor 210 , a bus 220 , a network interface 230 , memory 240 and a database 250 .
- the memory 240 may include an operating system (OS) 241 and an information protection routine 242 .
- the processor 210 may include an information segmentation unit 211 and an information restoration unit 212 .
- the information protection system 100 may include more elements than the elements of FIG. 2 . However, most of conventional elements do not need to be clearly shown.
- the information protection system 100 may include other element, such as a display or a transceiver.
- the memory 240 is a computer-readable recording medium, and may include permanent mass storage devices, such as random access memory (RAM), read only memory (ROM) and a disk drive. Furthermore, the memory 240 may store the OS 241 and program code for the information protection routine 242 . Such software elements may be loaded from a computer-readable recording medium separate from the memory 240 using a drive mechanism (not shown). Such a separate computer-readable recording medium may include computer-readable recording media (not shown), such as a floppy drive, a disk, a tape, a DVD/CD-ROM drive and a memory card. In other embodiments, the software elements may be loaded onto the memory 240 through the network interface 230 not a computer-readable recording medium.
- the bus 220 may enable communication and data transmission between the elements of the information protection system 100 .
- the bus 220 may be configured using a high-speed serial bus, a parallel bus, a storage area network (SAN) and/or other proper communication technology.
- SAN storage area network
- the network interface 230 may be a computer hardware element for connecting the information protection system 100 to a computer network.
- the network interface 230 may connect the information protection system 100 to the computer network through a wired or wireless connection.
- the database 250 may function to store and retain information necessary to provide the information protection service and all of pieces of information shared through the corresponding service.
- the database 250 may store and retain personal information (e.g., login information and friend information) of a user who uses the information protection service, information shared with other persons, etc.
- the database 250 has been illustrated as being constructed within the information protection system 100 , but the present invention is not limited thereto.
- the database may be omitted depending on a system implementation method or an environment or some of or the entire database may be present as an external database constructed on a separate system.
- the database 250 may be implemented as a local database included in an app installed on the user terminal 101 , 102 .
- the processor 210 may be configured to process the instructions of a computer program by performing basic arithmetic and logic and the input/output operations of the information protection system 100 .
- the instructions may be provided from the memory 240 or the network interface 230 to the processor 210 through the bus 220 .
- the processor 210 may include the information segmentation unit 211 and the information restoration unit 212 .
- the elements of the processor 210 may be expressions of different functions performed by the processor 210 in response to a control command provided as at least one program code.
- the information segmentation unit 211 may be used as a functional expression operating to control the information protection system 100 so that the processor 210 splits shared information.
- the processor 210 and the elements of the processor 210 may perform steps S 310 to S 340 included in an information protection method of FIG. 3 .
- the processor 210 and the elements of the processor 210 may be implemented to execute the code of the OS 241 of the memory 240 and instructions according to the at least one program code.
- the at least one program code may correspond to the code of a program implemented to process the information protection method.
- the information protection method may not be performed in order shown, and some of the steps may be omitted from the information protection method or an additional process may be further included in the information protection method.
- the processor 210 may load program code stored in a program file for the information protection method on the memory 240 .
- the program file for the information protection method may have been stored in a permanent storage device.
- the processor 210 may control the information protection system 100 so that the program code is loaded from the program file stored in the permanent storage device to the memory 240 through the bus 220 .
- the processor 210 and the information segmentation unit 211 and information restoration unit 212 of the processor 210 may be different functional expressions of the processor 210 for executing instructions that belong to the program code loaded on the memory 240 and that include corresponding portions and then executing steps S 320 to S 340 .
- the processor 210 and the elements of the processor 210 may directly perform operation according to a control command or may control the information protection system 100 .
- the information segmentation unit 211 may set information to be shared (hereinafter referred to as “shared information”) and a target who will share the shared information (hereinafter referred to as a “sharing counterpart”) so that information including contents to be protected is shared between users.
- shared information information to be shared
- the information segmentation unit 211 may photograph a photo or a moving image and set corresponding photographed information as shared information.
- the information segmentation unit 211 may generate a voice file through recording and set a generated file as shared information.
- a stored file for example, a file photo, a moving image, document or voice is called through call
- the information segmentation unit 211 may set the called file as shared information.
- the information segmentation unit 211 may directly set a file generated through a function, such as photographing, recording or document writing, as shared information while operating in conjunction with the corresponding function or may call various files stored in a local storage space and/or an external storage space and set the called files as shared information.
- a file set as the shared information is not stored in a user terminal. If a file stored in a user terminal is set as shared information, the file may be automatically deleted from the user terminal after it is delivered to the server.
- the information segmentation unit 211 may provide a counterpart list in which a relation (e.g., fried) with a user who has requested information sharing has been set, and may set a target selected through a corresponding list as a sharing counterpart.
- the information segmentation unit 211 may provide a list of users who can use the information protection service (e.g., a list of users who have installed a dedicated app) while operating in conjunction with contact information or messenger friend list of a user terminal.
- the information segmentation unit 211 may segment the shared information into pieces of a number corresponding to the sharing counterpart, and may transmit the segmented pieces of the shared information to the terminals of all of respective users included in the sharing counterpart. For example, the information segmentation unit 211 may segment the shared information into pieces of a number corresponding to the number of persons of the sharing counterpart. In other words, if N is set as the sharing counterpart for the shared information, the information segmentation unit 211 may segment the shared information into N pieces. For example, if a user A attempts to share a photo photographed along with a user B with the user B, the information segmentation unit 211 may segment the photo into two pieces.
- the information segmentation unit 211 may segment the actual data (or file) itself of the shared information into the N pieces, and may segment the shared information into the N pieces based on a layer unit, a time interval unit, a space range unit or a library unit by taking the type of shared information into consideration.
- a method of segmenting the shared information is not limited to the above embodiment, and may be implemented in various manners in which the original information cannot be restored based on only some pieces. In this case, the shared information may be divided at the same ratio and segmented or may be segmented at different ratios between users.
- the corresponding photo may be segmented into two pieces, each one having the same ratio of 50%, or may be segmented into two pieces at different ratios, such as 70% and 30%.
- the processor 210 may retain information related to the segmentation of the shared information, that is, information about the sharing counterpart and the segmented pieces, as information necessary to restore the shared information after the segmentation process by matching the related information with the corresponding shared information. Accordingly, the information segmentation unit 211 segments the shared information into multiple pieces and stores the multiple pieces into multiple user terminals in a piece unit. Accordingly, an information protection level can be improved because shared information cannot be used without permission from a counterpart.
- the information segmentation unit 211 may cipher the segmented pieces of the shared information and transmit the ciphered segmented pieces to a user terminal.
- a encryption key used in this case may be the same or different with respect to the segmented pieces, thereby being capable of improving an information protection level.
- the information segmentation unit 211 may transmit the encryption key used for the ciphering of the segmented pieces to the user terminal so that the encryption key is stored along with the corresponding piece.
- the information segmentation unit 211 may not transmit the encryption key used for the ciphering of the segmented pieces to the user terminal, but may store it in the server. In this case, an information protection level can be improved because the encryption key used for the ciphering of the segmented pieces and the segmented piece are stored in different repositories.
- step S 340 if all of users included in the sharing counterpart accept the use of the shared information, the information restoration unit 212 may receive all the segmented pieces forming the shared information from the terminals of the users and restore the shared information as the original information. For example, when a use request for the shared information is received from the terminal of any one of the users included in the sharing counterpart, the information restoration unit 212 may request the segmented pieces of the shared information from the terminals of other users, and may receive segmented pieces from the terminal of the user who has requested the use of the shared information and the terminals of the users who have accepted the use of the shared information.
- the information restoration unit 212 may restore the shared information as the original information by synthesizing the received segmented pieces and transmit the restored shared information to the terminal of the user who has requested the use of the shared information.
- the restoration and use of shared information is impossible without permission from a counterpart who shares the shared information, that is, if some of segmented pieces forming the shared information is not received.
- the information restoration unit 212 may also request an encryption key in the process of requesting the segmented piece of the shared information from the terminal of the user, may receive the encryption key along with the segmented pieces from the terminal of the user, and may restore the segmented pieces.
- the information restoration unit 212 may read the encryption key used for the ciphering of the segmented pieces, may decipher the segmented pieces, and may restore the shared information. Furthermore, when restored shared information is transmitted to the terminal of the user who has requested the use of the shared information, the information restoration unit 212 may process the restored shared information using a copy prevention scheme (e.g., watermark technology) so that duplication, such as the copy of the restored shared information, is impossible. Accordingly, the information restoration unit 212 can process shared information including contents to be protected between users so that the restoration and use of the shared information are possible only when there is an agreement between the users.
- a copy prevention scheme e.g., watermark technology
- FIG. 4 is a diagram for illustrating an example of a photographed information segmentation process according to an embodiment of the present invention.
- the user A 101 may set the user B 102 as a counterpart with whom information is to be shared (S 41 ), and may set photographed information through the photographing of a photo or a moving image (S 42 ).
- the terminal of the user A 101 may transmit the photographed information to the server 100 along with information about the sharing counterpart (S 43 ).
- the photographed information to be shared with the user B 102 is deleted from the terminal of the user A 101 without being stored therein.
- the server 100 may segment the photographed information into pieces of a number corresponding to the number of persons of the sharing counterpart (S 44 ). For example, the server 100 may segment the photographed information to be shared between the user A 101 and the user B 102 into two pieces (e.g., segmented piece 1 and segmented piece 2 ), each one having the same ratio of 50%. In this case, the photographed information is segmented in a form in which it cannot be restored as the original photographed information using the segmented pieces themselves.
- the terminal of the user A 101 receives the segmented piece 1 of the segmented pieces of the photographed information from the server 100 and stores the received segmented piece 1 (S 47 ).
- the terminal of the user B 102 receives the segmented piece 2 of the segmented pieces of the photographed information from the server 100 and stores the received segmented piece (S 48 ).
- FIG. 5 is a diagram for illustrating an example of a photographed information restoration process according to an embodiment of the present invention.
- the terminal of the user A 101 may request the use of the photographed information from the server 100 (S 51 ).
- the server 100 may request acceptance for the use of the photographed information from a counterpart who shares the photographed information, that is, the terminal of the user B 102 (S 52 ).
- the terminal of the user B 102 may deliver the acceptance intention of the user B 102 to the server 100 (S 53 ).
- the server 100 receives the segmented piece 1 of the segmented pieces of the photographed information from the terminal of the user A 101 (S 54 ), and receives the segmented piece 2 of the segmented pieces of the photographed information from the terminal of the user B 102 (S 55 ).
- the server 100 may transmit the restored photographed information to the terminal of the user A 101 who has requested the use of the photographed information (S 57 ). Accordingly, the user A 101 may use the photographed information shared with the user B 102 through the terminal of the user A 101 due to the acceptance of the user B 102 (S 58 ).
- the server 100 may transmit notification, indicating that the use of the photographed information is impossible because the segmented piece 2 of the photographed information cannot be obtained and thus restoration to the original information is impossible, to the terminal of the user A 101 .
- the user A 101 and the user B 102 can retain and share photographed information segmented in a piece unit, can check the photographed information only when they accept the use of the photographed information, and cannot check or open the photographed information if a counterpart does not accept the use of the photographed information.
- the memory 620 may include high-speed random access memory, magnetic disks, SRAM, DRAM, ROM, flash memory or non-volatile memory, for example.
- the memory 620 may store a software module, an instruction set or other various data necessary for the operation of the computer system 600 . In this case, the access of the processor 610 or other component, such as the peripheral interface 630 , to the memory 620 may be controlled by the processor 610 .
- the peripheral interface 630 may couple the input and/or output peripheral device of the computer system 600 with the processor 610 and the memory 620 .
- the processor 610 may perform various functions for the computer system 600 and process data by executing the software module or instruction set stored in the memory 620 .
- the power circuit 650 may supply power to some of or all the elements of the user terminal.
- the power circuit 650 may include a power management system, a battery or one or more power sources such as AC, a charging system, a power failure detection circuit, a power converter or inverter, a power state indicator, or any other components for power generation, management and distribution.
- the communication circuit 660 may communicate with another computer system using at least one external port.
- the communication circuit 660 may include an RF circuit, if necessary, and communicate with another computer system by transmitting/receiving an RF signal called an electromagnetic signal.
- the computer system 600 is only an example.
- the computer system 600 may omit some of the elements shown in FIG. 6 , may further include an additional component not shown in FIG. 6 or may have a configuration or disposition in which two or more elements are combined.
- the computer system for a communication terminal of a mobile environment may further include a touch screen or a sensor in addition to the elements of FIG. 6 .
- the communication circuit 660 may include circuits for RF communication, such as various communication methods (e.g., Wi-Fi, 3G, LTE, Bluetooth, NFC and Zigbee).
- Elements which may be included in the computer system 600 may be implemented as hardware including an integrated circuit specific to one or more signal processing or apps, software or a combination of the hardware and software.
- the leakage of unwanted information can be prevented by not allowing information including contents to be protected to be shared without permission from a counterpart that shares the information including contents to be protected.
- the methods according to the embodiments of the present invention may be implemented in the form of program instructions executable through various computer systems and recorded on a computer-readable medium.
- a program according to the present embodiment may be a mobile-dedicated app or a PC-based program.
- An app to which the present invention is applied may be implemented in the form of an independently operating program or an in-app form of a specific app, and may be implemented to operate on a specific app.
- the methods according to the embodiments of the present invention may be performed in such a manner that an app associated with a server system providing information protection service controls a user terminal.
- the app may execute one or more processes configured to perform one or more of the characteristics described in this specification.
- the app may be installed on a user terminal through a file provided by a file distribution system.
- the file distribution system may include a file transmitter (not shown) that transmits the file in response to a request from the user terminal.
- the processing device may include a plurality of processing elements and/or a plurality of types of processing elements.
- the processing device may include a plurality of processors or a single processor and a single controller.
- other processing configurations such as a parallel processor, are also possible.
- Software may include a computer program, code, an instruction or one or more combinations of them and may configure the processing device so that it operates as desired or may instruct the processing device independently or collectively. Th software and/or data may be interpreted by the processing device or may be embodied in a machine, component, physical device, virtual equipment or computer storage medium or device of any type or a transmitted signal wave permanently or temporarily in order to provide an instruction or data to the processing device.
- the software may be distributed to computer systems connected over a network and may be stored or executed in a distributed manner.
- the software and data may be stored in one or more computer-readable recording media.
- the method according to the embodiment may be implemented in the form of a program instruction executable by various computer means and stored in a computer-readable recording medium.
- the computer-readable recording medium may include a program instruction, a data file, and a data structure solely or in combination.
- the program instruction recorded on the recording medium may have been specially designed and configured for the embodiment or may be known to those skilled in computer software.
- the computer-readable recording medium includes a hardware device specially configured to store and execute the program instruction, for example, magnetic media such as a hard disk, a floppy disk, and a magnetic tape, optical media such as CD-ROM or a DVD, magneto-optical media such as a floptical disk, ROM, RAM, or flash memory.
- Examples of the program instruction may include both machine-language code, such as code written by a compiler, and high-level language code executable by a computer using an interpreter.
- the hardware device may be configured in the form of one or more software modules for executing the operation of the embodiment, and the vice versa.
- the leakage of unwanted information can be prevented because information including contents to be protected cannot be used without permission from a counterpart who shares the information including contents to be protected.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Databases & Information Systems (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Software Systems (AREA)
- Quality & Reliability (AREA)
- Information Transfer Between Computers (AREA)
- Storage Device Security (AREA)
Abstract
Description
Claims (10)
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
KR10-2016-0071212 | 2016-06-08 | ||
KR1020160071212A KR101846163B1 (en) | 2016-06-08 | 2016-06-08 | Method and system for protecting shared information |
PCT/KR2017/000261 WO2017213321A1 (en) | 2016-06-08 | 2017-01-09 | Method and system for protecting sharing information |
Publications (2)
Publication Number | Publication Date |
---|---|
US20190036685A1 US20190036685A1 (en) | 2019-01-31 |
US10931446B2 true US10931446B2 (en) | 2021-02-23 |
Family
ID=60578767
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US16/074,418 Active 2037-04-11 US10931446B2 (en) | 2016-06-08 | 2017-01-09 | Method and system for protecting sharing information |
Country Status (3)
Country | Link |
---|---|
US (1) | US10931446B2 (en) |
KR (1) | KR101846163B1 (en) |
WO (1) | WO2017213321A1 (en) |
Families Citing this family (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR102419433B1 (en) * | 2019-11-27 | 2022-07-12 | 주식회사 와임 | Method and system for security-enhanced evaluation data inquiry |
CN113645172B (en) * | 2020-04-27 | 2023-01-24 | 北京圜晖科技有限公司 | Three-dimensional model data transmission method, server, user terminal and storage medium |
Citations (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020194295A1 (en) * | 2001-06-15 | 2002-12-19 | Groupe 2Mb Inc. | Scalable data-sharing architecture |
KR20090129741A (en) | 2008-06-13 | 2009-12-17 | 삼성디지털이미징 주식회사 | Digital photographing apparatus, method for controlling the same, and recording medium storing program to implement the method |
JP4456185B2 (en) | 1997-08-29 | 2010-04-28 | 富士通株式会社 | Visible watermarked video recording medium with copy protection function and its creation / detection and recording / playback device |
US20100185852A1 (en) * | 2007-07-05 | 2010-07-22 | Hitachi Software Engineering Co., Ltd. | Encryption and decryption method for shared encrypted file |
US8051205B2 (en) * | 2008-10-13 | 2011-11-01 | Applied Micro Circuits Corporation | Peer-to-peer distributed storage |
US8081758B2 (en) * | 2004-12-28 | 2011-12-20 | Hitachi, Ltd. | Communication support server, communication support method, and communication support system |
KR20130008147A (en) | 2011-07-12 | 2013-01-22 | (주)지란지교소프트 | Method for sharing memory of terminals and device thereof |
US8464066B1 (en) * | 2006-06-30 | 2013-06-11 | Amazon Technologies, Inc. | Method and system for sharing segments of multimedia data |
US20140173270A1 (en) * | 2012-08-24 | 2014-06-19 | Panasonic Corporation | Secret sharing method and system |
US20140259134A1 (en) * | 2013-03-07 | 2014-09-11 | Fiserv, Inc. | Single sign-on processing for associated mobile applications |
JP2015179890A (en) | 2014-03-18 | 2015-10-08 | キヤノン株式会社 | Image formation device, remote maintenance system, information processing method and program |
KR20160022230A (en) | 2014-08-19 | 2016-02-29 | 조동현 | Method and apparatus for processing information |
US9361450B2 (en) * | 2011-02-24 | 2016-06-07 | Empire Technology Development Llc | Authentication using mobile devices |
-
2016
- 2016-06-08 KR KR1020160071212A patent/KR101846163B1/en active IP Right Grant
-
2017
- 2017-01-09 WO PCT/KR2017/000261 patent/WO2017213321A1/en active Application Filing
- 2017-01-09 US US16/074,418 patent/US10931446B2/en active Active
Patent Citations (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP4456185B2 (en) | 1997-08-29 | 2010-04-28 | 富士通株式会社 | Visible watermarked video recording medium with copy protection function and its creation / detection and recording / playback device |
US20020194295A1 (en) * | 2001-06-15 | 2002-12-19 | Groupe 2Mb Inc. | Scalable data-sharing architecture |
US8081758B2 (en) * | 2004-12-28 | 2011-12-20 | Hitachi, Ltd. | Communication support server, communication support method, and communication support system |
US8464066B1 (en) * | 2006-06-30 | 2013-06-11 | Amazon Technologies, Inc. | Method and system for sharing segments of multimedia data |
US20100185852A1 (en) * | 2007-07-05 | 2010-07-22 | Hitachi Software Engineering Co., Ltd. | Encryption and decryption method for shared encrypted file |
KR20090129741A (en) | 2008-06-13 | 2009-12-17 | 삼성디지털이미징 주식회사 | Digital photographing apparatus, method for controlling the same, and recording medium storing program to implement the method |
US8051205B2 (en) * | 2008-10-13 | 2011-11-01 | Applied Micro Circuits Corporation | Peer-to-peer distributed storage |
US9361450B2 (en) * | 2011-02-24 | 2016-06-07 | Empire Technology Development Llc | Authentication using mobile devices |
KR20130008147A (en) | 2011-07-12 | 2013-01-22 | (주)지란지교소프트 | Method for sharing memory of terminals and device thereof |
US20140173270A1 (en) * | 2012-08-24 | 2014-06-19 | Panasonic Corporation | Secret sharing method and system |
US20140259134A1 (en) * | 2013-03-07 | 2014-09-11 | Fiserv, Inc. | Single sign-on processing for associated mobile applications |
JP2015179890A (en) | 2014-03-18 | 2015-10-08 | キヤノン株式会社 | Image formation device, remote maintenance system, information processing method and program |
KR20160022230A (en) | 2014-08-19 | 2016-02-29 | 조동현 | Method and apparatus for processing information |
Non-Patent Citations (1)
Title |
---|
International Search Report dated Apr. 14, 2017, issued in corresponding International Application No. PCT/KR2017/000261, filed Jan. 9, 2017, 5 pages. |
Also Published As
Publication number | Publication date |
---|---|
WO2017213321A1 (en) | 2017-12-14 |
KR20170138853A (en) | 2017-12-18 |
US20190036685A1 (en) | 2019-01-31 |
KR101846163B1 (en) | 2018-04-09 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10990696B2 (en) | Methods and systems for detecting attempts to access personal information on mobile communications devices | |
US11570160B2 (en) | Securely authorizing access to remote resources | |
US9923902B2 (en) | Remote processsing of mobile applications | |
AU2018347191B2 (en) | Managing private transactions on blockchain networks based on workflow | |
US9246944B1 (en) | Systems and methods for enforcing data loss prevention policies on mobile devices | |
US9104840B1 (en) | Trusted security zone watermark | |
US9749299B1 (en) | Systems and methods for image-based encryption of cloud data | |
CN104937904A (en) | Copy offload for disparate offload providers | |
US20210383029A1 (en) | Information processing program, information processing device, and information processing method | |
US10931446B2 (en) | Method and system for protecting sharing information | |
US20230076870A1 (en) | Protections for sensitive content items in a content management system | |
US20200334365A1 (en) | Self-Management of Devices Using Personal Mobile Device Management | |
US20170053122A1 (en) | Photograph metadata encryption | |
US20220284125A1 (en) | System for electronic data obfuscation and protection using independent destructible data objects | |
US11216565B1 (en) | Systems and methods for selectively encrypting controlled information for viewing by an augmented reality device | |
US9754086B1 (en) | Systems and methods for customizing privacy control systems | |
US20230267236A1 (en) | Mobile computing device comprising compartmentalized computing module |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
FEPP | Fee payment procedure |
Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: SMALL ENTITY |
|
FEPP | Fee payment procedure |
Free format text: ENTITY STATUS SET TO SMALL (ORIGINAL EVENT CODE: SMAL); ENTITY STATUS OF PATENT OWNER: SMALL ENTITY |
|
AS | Assignment |
Owner name: WAEM CO., LTD., KOREA, DEMOCRATIC PEOPLE'S REPUBLI Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:CHO, RAE SUNG;CHO, DONG HYUN;REEL/FRAME:046773/0336 Effective date: 20180726 Owner name: WAEM CO., LTD., KOREA, DEMOCRATIC PEOPLE'S REPUBLIC OF Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:CHO, RAE SUNG;CHO, DONG HYUN;REEL/FRAME:046773/0336 Effective date: 20180726 |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |